noumen 0.6.0 → 0.8.0

package/dist/chunk-BC5BLWBC.js

@@ -0,0 +1,21 @@
+import {
+  LocalComputer,
+  LocalFs
+} from "./chunk-XQTNXRE7.js";
+
+// src/virtual/unsandboxed.ts
+function UnsandboxedLocal(opts) {
+  const cwd = opts?.cwd;
+  return {
+    fs: new LocalFs({ basePath: cwd }),
+    computer: new LocalComputer({
+      defaultCwd: cwd,
+      defaultTimeout: opts?.defaultTimeout
+    })
+  };
+}
+
+export {
+  UnsandboxedLocal
+};
+//# sourceMappingURL=chunk-BC5BLWBC.js.map

package/dist/chunk-BC5BLWBC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/virtual/unsandboxed.ts"],"sourcesContent":["import { LocalFs } from \"./local-fs.js\";\nimport { LocalComputer } from \"./local-computer.js\";\nimport type { Sandbox } from \"./sandbox.js\";\n\nexport interface UnsandboxedLocalOptions {\n  /** Working directory for both file resolution and command execution. */\n  cwd?: string;\n  /** Default timeout (ms) for shell commands. */\n  defaultTimeout?: number;\n}\n\n/**\n * Create a `Sandbox` backed by the host filesystem and shell with **no\n * OS-level isolation**. The agent can access anything the host process can.\n *\n * Use this for development or fully-trusted environments where sandboxing\n * overhead is unwanted. For production use, prefer `LocalSandbox()` (which\n * wraps commands with `@anthropic-ai/sandbox-runtime`).\n */\nexport function UnsandboxedLocal(opts?: UnsandboxedLocalOptions): Sandbox {\n  const cwd = opts?.cwd;\n  return {\n    fs: new LocalFs({ basePath: cwd }),\n    computer: new LocalComputer({\n      defaultCwd: cwd,\n      defaultTimeout: opts?.defaultTimeout,\n    }),\n  };\n}\n"],"mappings":";;;;;;AAmBO,SAAS,iBAAiB,MAAyC;AACxE,QAAM,MAAM,MAAM;AAClB,SAAO;AAAA,IACL,IAAI,IAAI,QAAQ,EAAE,UAAU,IAAI,CAAC;AAAA,IACjC,UAAU,IAAI,cAAc;AAAA,MAC1B,YAAY;AAAA,MACZ,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/{chunk-XZN4QZLK.js → chunk-CX4BL6PC.js}

@@ -1,12 +1,12 @@
+import {
+  formatZodValidationError
+} from "./chunk-3SK5GCI6.js";
 import {
   IMAGE_EXTENSIONS,
   compressImageBufferWithTokenLimit,
   createImageMetadataText,
   maybeResizeAndDownsampleImageBuffer
-} from "./chunk-5GEX6ZSB.js";
-import {
-  formatZodValidationError
-} from "./chunk-3SK5GCI6.js";
+} from "./chunk-HQISH4D7.js";
 import {
   contentToString
 } from "./chunk-JACGEMTF.js";
@@ -1316,7 +1316,7 @@ var writeFileTool = {
         message: "Error: UNC paths are not allowed"
       };
     }
-    if (isDangerousPath(filePath, ctx.cwd)) {
+    if (isDangerousPath(filePath, ctx.cwd, ctx.dotDirResolver?.config.names)) {
       return {
         behavior: "ask",
         message: `Write targets sensitive path: ${filePath}`,
@@ -1544,7 +1544,7 @@ var editFileTool = {
         message: "Error: UNC paths are not allowed"
       };
     }
-    if (isDangerousPath(filePath, ctx.cwd)) {
+    if (isDangerousPath(filePath, ctx.cwd, ctx.dotDirResolver?.config.names)) {
       return {
         behavior: "ask",
         message: `Edit targets sensitive path: ${filePath}`,
@@ -2768,7 +2768,7 @@ function resolveAutoModeDecision(params) {
 }
 
 // src/permissions/pipeline.ts
-var DANGEROUS_PATH_PATTERNS = [
+var BASE_DANGEROUS_PATH_PATTERNS = [
   /(?:^|\/)\.git(?:\/|$)/,
   /(?:^|\/)\.bashrc$/,
   /(?:^|\/)\.bash_profile$/,
@@ -2780,14 +2780,23 @@ var DANGEROUS_PATH_PATTERNS = [
   /(?:^|\/)\.npmrc$/,
   /(?:^|\/)\.vscode(?:\/|$)/,
   /(?:^|\/)\.idea(?:\/|$)/,
-  /(?:^|\/)\.claude(?:\/|$)/,
-  /(?:^|\/)\.noumen(?:\/|$)/,
   /(?:^|\/)\.gitconfig$/,
   /(?:^|\/)\.gitmodules$/,
   /(?:^|\/)\.mcp\.json$/,
   /(?:^|\/)\.ripgreprc$/,
   /(?:^|\/)\.noumen\.json$/
 ];
+var DEFAULT_PROTECTED_DOT_DIRS = [".noumen", ".claude"];
+function escapeForRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function buildDangerousPathPatterns(dotDirNames) {
+  const names = dotDirNames && dotDirNames.length > 0 ? dotDirNames : DEFAULT_PROTECTED_DOT_DIRS;
+  const dotDirPatterns = names.map(
+    (name) => new RegExp(`(?:^|\\/)${escapeForRegex(name)}(?:\\/|$)`)
+  );
+  return [...BASE_DANGEROUS_PATH_PATTERNS, ...dotDirPatterns];
+}
 async function resolvePermission(tool, input, ctx, permCtx, opts) {
   const toolName = tool.name;
   const contentHint = extractContentHint(tool, input);
@@ -2852,7 +2861,7 @@ async function resolvePermission(tool, input, ctx, permCtx, opts) {
     }
   }
   const dangerousFilePath = typeof input.file_path === "string" ? input.file_path : typeof input.path === "string" ? input.path : void 0;
-  if (dangerousFilePath && isDangerousPath(dangerousFilePath, ctx.cwd)) {
+  if (dangerousFilePath && isDangerousPath(dangerousFilePath, ctx.cwd, permCtx.dotDirNames)) {
     return {
       behavior: "ask",
       message: `Path "${dangerousFilePath}" targets a sensitive location.`,
@@ -2865,7 +2874,7 @@ async function resolvePermission(tool, input, ctx, permCtx, opts) {
       const tokens = sub.trim().split(/\s+/);
       for (const token of tokens) {
         if (token.startsWith("-")) continue;
-        if (isDangerousPath(token, ctx.cwd)) {
+        if (isDangerousPath(token, ctx.cwd, permCtx.dotDirNames)) {
           return {
             behavior: "ask",
             message: `Bash command references sensitive path "${token}".`,
@@ -3053,18 +3062,19 @@ async function resolvePermission(tool, input, ctx, permCtx, opts) {
   }
   return finalAsk;
 }
-function isDangerousPath(filePath, basePath) {
+function isDangerousPath(filePath, basePath, dotDirNames) {
   const base = basePath ?? process.cwd();
   const resolved = path5.resolve(base, filePath);
   const relative2 = path5.relative(base, resolved);
   const candidate = (relative2.startsWith("..") ? resolved.replace(/^\/+/, "") : relative2).toLowerCase();
-  if (DANGEROUS_PATH_PATTERNS.some((p) => p.test(candidate))) return true;
+  const patterns = buildDangerousPathPatterns(dotDirNames);
+  if (patterns.some((p) => p.test(candidate))) return true;
   try {
     const realPath = fs2.realpathSync(resolved);
     if (realPath !== resolved) {
       const realRelative = path5.relative(base, realPath);
       const realCandidate = (realRelative.startsWith("..") ? realPath.replace(/^\/+/, "") : realRelative).toLowerCase();
-      if (DANGEROUS_PATH_PATTERNS.some((p) => p.test(realCandidate))) return true;
+      if (patterns.some((p) => p.test(realCandidate))) return true;
     }
   } catch {
   }
@@ -3109,4 +3119,4 @@ export {
   resolveToolFlag,
   ToolRegistry
 };
-//# sourceMappingURL=chunk-XZN4QZLK.js.map
+//# sourceMappingURL=chunk-CX4BL6PC.js.map